522 but just for some IPs / countries / users

Application Performance DNS & Network
1

What is the name of the domain?

wordsense.eu

What is the error number?

522

What is the error message?

Connection timed out

What is the issue you’re encountering

The Website shows an 522 error but just for some users / IPs / countries

What steps have you taken to resolve the issue?

I removed the Domain from Cloudflare and added it again

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

Try https://www.wordsense.eu/

Screenshot of the error

wordsense_eu_screenshot.jpg
wordsense_eu_screenshot.jpg1650×933 81.4 KB

2

The problem is that some users seeing the 522 error page while others doesn’t have any problems. It seems to depend on the country oder the IP or the type of IP (IPV4 vs IPV6).

I can’t figure out which users are blocked nor how to solve the problem.

Yesterday everything was fine. The problem appeared suddenly.

3

Is the screenshot you have attached the only information that you have received from your user(s)?

It says that the user was routed to the Cloudflare facility in Newark, New Jersey, US, I’m just wondering if there is a “correlation” here, like if it is always the Newark facility that users see that 522 on, or if you have seen others?

The user successfully ended up on the Cloudflare facility in Newark, New Jersey, US, however, that Cloudflare facility wasn’t able to reach your own server.

→

  1. Did you configure your DNS record(s) in Cloudflare with AAAA (IPv6) or A (IPv4) records?
    … Or how exactly does traffic go from Cloudflare to your origin?

  2. Have you ensured that your firewall(s) and other ACL(s) are up-to-date, with the lists of Cloudflare IP addresses from IP Ranges | Cloudflare, so that these IP ranges aren’t being blocked?
    → Even though the list of IP ranges appear to change very infrequently, - then if you’re failing to get just one IP range in the list, you may be able to see failures like the one you’re showing.

  3. Geographical restrictions in your firewall/ACL can also interfere, such as e.g. if Newark, New Jersey, US is well outside of your expected sources of traffic, and therefore, it is important that the IP ranges (#2) are allowed in firewalls/ACLs, with a priority that comes before any geographical blocks.

4

I’m experiencing this exact issue. Some users in the US can’t access my website. When I use a VPN with a US location, I encounter the same problem. However, I can access my website directly through the server IP address. I’m not sure where to report this issue so that someone at Cloudflare will see it.

5

Thank you very much for your reply.

  • The DNS records in Cloudflare were configured with (IPv4) records (a long time ago)
  • Cloudflare IPs were and are (to my knowledge) not blocked. Nothing has been changed in the settings
  • Geographical areas are also not blocked (to my knowledge)

Now comes the good news: the problem has disappeared as suddenly as it appeared. I have no explanation for either the appearance or the disappearance.

At least the problem is solved (for now). As everything went smoothly for years, I hope it stays that way :slight_smile: